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REMARKS 



The Examiner has rejected Claims 1-8, and 10-31 under 35 U.S^C 103(a) as being 
unpatentable over Aionson et al. (U.S. Patent No. 6,654,787 BI) in view of Leeds (U.S. 
Patent No. 6,393,465 B2). Applicant respectfully disagrees with such rejection. 

With respect to the independent claims, the Examiner has relied on CoL 4, lines 51- 
56, and Col. 5, hnes 50-67 m Aronson, and the Abstract; Col. 3, lines 54-67; and CoL 4, lines 
1-35 in Leeds to make a prior art showing of applicant's claimed 'Identifying an authority 
hosting the network address" (see the same or similar, but not necessarily identical language 
in the independent claims). 

Applicant respectfully asserts that the excerpts from Leeds relied on by the Examiner 
only relate to a host computer associated with a sender of an electronic mail message (see 
Abstract and CoL 4, lines 66-67, specifically). In addition, Leeds discloses that "if a message 
has purportedly hcea relayed through a machine named maiLfromnowhere.com and the mail 
handling system has determined that such a machine does not actually exist, Ibe confidence 
rating for the message should be increased." Clearly, determining a host computer/host name 
of a sender of e-mail or relay docs not meet applicant's specific claim language, namely an 
' >uthoritv hosting the network address" (emphasis added), as claimed by applicant 

Further, applicant respectfiilly asserts that the excerpts from Aionson rehed upon by 
the Examiner merely disclose that "[o]ther contemplated rule handling filter modules will 
filter e-mail based on: (1) word or letter fi:equency analysis; (2) IP source fineouencv analysis: 
(3) misspelling analysis (unwanted e-mail often contains misspelled words); (4) worf or 
letter combination analysis; (5) technical or legal RFC822 head^ compliance; and (6) feature 
extraction & analysis fe.g.. based on phon ft numbe rs, URL^s, addresses. etc.Y * (emphasis 
added). Clearly, filteritxg e-mail based on P source frequency and feature extraction & 
analysis fails to even suggest 'Identifying an authority hosting the network address'' 
(emphasis added), as claimed by applicant 
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la addition, the Examiner argued that "Ar[o]nson disclosed that the source header 
data from an mcoming e-mail address faardvark^^Lcom) is analyzed by the spam probes." 
Further, the Examiner argued that '[t]he source header data includes tiie ISP (in this case 
"aor*) hosting the spammer's network address (see col4, lines 45-67)/ Specifically, the 
exceipt from Aronson discloses that "[a] spam probe is an e-mail address selected to make its 
way onto as many spam mailing lists as possible." Aronson continues, teaching that "[i]t is 
also selected to appear high up on spammers' lists in order to receive spam mailings early in 
the mailing process" using an e-mail address such as "aardvark@aol.com . ^' Clearly, the 
mere disclosure of using an e-mail address in a spam probe completely fails to even suggest 
'Identifying an authority hosting the network address" (emphasis added), as claimed by 
apphcant. hi addition, it appears that tlie Examiner is improperly citing the domain portion 
of in an e-mail address (e.g. aoLcom) to meet applicant's claimed '"network address.^' 

Still with respect to each of tiie independent claims, the Examiner has again relied on 
the Abstract; Col. 3, lines 54-67; and Col. 4^ lines 1-35 in Leeds to make a prior art showing 
of ^licant's claimed "graerating a report containing the identified network address and 
hosting authority* (see the same or similar, but not necessarily identical language in the 
independent claims). 

Applicant respectfully asserts that the only suggestion of a "report" in the excerpts 
relied on by the Examiner merely relates to "seed addresses [which] can alert an e-mail 
provider to potential mass mailings by reporting when mail is received for ghost or non- 
existent accounts.'' Clearly, alerting an e-mail provider when a e-mail is received for a seed 
address fails to even suggest "graerating a report containing the identified network address 
and hosting authoritv' ' (emphasis added), as claimed by applicant. 

Further, the Examiner argued that "Leeds also describes the similatr process of 
identifying the host name of the spammer's address (please see col.4, lines 6(^67 & coL5, 
lines 1-45)." Specifically, Leeds discloses that '[t]he fields for "Return Path:," "From:/ and 
"R^ly-To:" are highlighted as three of the fields which the present invention will parse from 
the message header. ' As an example, Leeds teaches that 'Trom: 
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48941493 @notarealaddrcss.com is broken down into a user id (48941493) and a host name 
fnotarealaddress.comy ' (emphasis added). Leeds continues, disclosing that 'a first level 
check is [used] to determine if the alleged sender identified by the Trom:" or "Reply-To:" 
fields are valid.* Leeds discloses that the first level check *includ[es]: (I) sending a message 
to the user identified by the "From:'' or "Reply-To:*' fields and examining whether the 
message can be successfully delivered, (2) using the UNIX " whois " command to detennine if 
a site (or host) by that name actually exists, (3) using the UNIX " finger " command to identify 
if a user name exists at a verifiable host, (4) using the " yrfV ' command when connected to a 
sendmail daemon to verify that a user exists at a particular site, and (5) using the UNIX 
" traceroute " command to make sure there is a valid route back to the specified host' 
(emphasis added). Clearly, performing a first level check including using whois, and 
traceroute to verify the host name fix)m the "From:" and "Reply-To:" fields fails to even 
suggest "generating a report containing the identified network address and hosting 
authoritv ** (emphasis added), as claimed by applicant. 

Furth^, with respect to each of &e independent claims, the Examiner has relied on 
Col. 4, lines 60-67; Col. 5, lines 1-44, and Col. 6, lines 52-65 in Leeds to make a prior art 
showing of applicant's claimed technique 'Vherein identifying the hosting authority 
comprises identifying an owner of a network domain"" (see the same or similar, but not 
necessarily identical language in the independent claims). 

Applicant respectfiilly asserts that the excerpts from Leeds relied upon by the 
Examiner merely disclose 'a first level check is to detennine if the alleged sender idcaitified 
by the Trom ;'* or "Rq)lv-To :" fields are valid ' (emphasis added). In addition, Leeds 
discloses 'using the UNIX "whois " conmiand to deteramne if a site ( or host) b v that name 
actually exists ' (emphasis added). Clearly, using whois to perform a first level check to 
ensure the host actually exists for the alleged sender in the "From:" or **Reply-To:" fields 
fails to even suggest a technique 'Vherein identifying the hosting authority comprises 
identifying an owner of a network domain" (emphasis added), as claimed by applicant. 
Applicant respectfully asserts that merely ensuring that a host actually exists fails to even 
suggest "identifying an owner of a network domain," as claimed by applicant. 
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To establish SLprima facie case of obviousness, three basic criteria must be met. First, 
there must be some suggestion or motivation, either in the references themselves or in the 
knowledge generally available to one of ordinary skill in the art, to modify the reference or to 
combine reference teachings. Second, there must be a reasonable expectation of success. 
Finally, the prior art reference (or references when combined) must teach or suggest all the 
claim limitations. The teaching or suggestion to make the claimed combination and the 
reasonable expectation of success must both be found in the prior art and not based on 
applicant's disclosure. In re Vaeck,947 F.2d 488, 20 USPQ2d 1438 (Fed.Cir.1991). 

Applicant respectfully asserts that at least the third element of the prima facie case of 
obviousness has not been met, since the prior art references, when combined, fail to teach or 
suggest all of the claim limitations, as noted above. Thus, a notice of allowance or a pippgy 
prior art showing of all of the claim Umitations, in the context of the remaining elraients, is 
respectfully requested. 

Applicant further notes that the prior art is also deficient with respect to flie dependent 
claims. Just by way of example, with respect to Claim 2 et al., the Examiner has relied on 
Col 4, lines 36-67; Col. 5, lines 1-44; and CoL 8, lines 34-57 in Leeds to make a prior art 
showing of applicant's claimed *transraittmg the generated report to the identified hosting 
authority," i^plicant respectfully asserts that the only mention of any sort of report in such 
excerpts 6om Leeds simply teaches that "addresses could be watched for incoming junk e- 
mail and a notification firom the authentication server could then be broadcast to users 
indicating that mail with the subject of "XYZ" is junk e-mail" (see, specifically. CoL 8, hnes 
47-50). Clearly, such notification sent to users does not meet applicant's claimed 
•Iransmitting the generated report to the identified hosting authority " (emphasis added). 

With respect to Claim 4, the Examiner has reUed on Col 4, lines 57-67; Col. 5, lines 
1-8; and CoL 5, lines 50-67 in Aronson to make a prior art showing of applicant's claimed 
technique *Svherein identifying a URL comprises comparing text within the electronic 
message to a database of words to identify the URL/' After careful review of the excerpts 
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relied on by the Examiner, applicant notes that the only URL disclosed in Aronson relates to 
filtering e-mail based on '^feature extraction & analysis (e.g.,..,UBJL's...)" (see Col. 5, lines 
63-64). However, Aronson does not teach how such URL is identified, whereas applicant 
specifically claims "identifying a URL [by] comparing text within the electronic message to 
a database of words to identify the URL." Applicant fiirther notes that Aronson only teaches 
that spam may be filtered **based on a specific keyword search," and that thCTefore the 
keywords are used to identify spam, but not that a database of words is utilized to 'Identify 
the URL' ' in the manner claimed by applicant (emphasis added). 

With respect to Claim 12, the Examiner has relied on Col 5, lines 38-44 in Leeds to 
make a prior art showing of applicant's claimed technique including "at least temporarily 
saving the report and transmitting the report to the identified hosting authority at the end of a 
Specified period." AppHcant respectfully asserts that such exceipt only relates to "sending a 
verification address. . .within a period of time," Clearly, sending a verification message to 
determine if a user is actually associated with the sender of e-mail does not meet ^plicant*s 
claims report let alone 'transmitting the report to the identified hosting authority at the end 
of a specified period" (emphasis added). 

Again, since at least the third dement of the prima facie case of obviousness has not 
been met a notice of allowance or a proper prior art showing of dl of the claim limitations, 
in the context of the remaining elements, is respectfully requested 
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